CVE-2023-0744

Improper Access Control in answerdev/answer

CVSS 9.8 CRITICALEPSS 6.4%CWE-284

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

answerdev · answerdev/answer

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/171733/Answerdev-1.0.3-Account-Takeover.htmlunverified exploitdbwww.exploit-db.com/exploits/51257unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/171733/Answerdev-1.0.3-Account-Takeover.html https://github.com/answerdev/answer/commit/c1fa2b13f6b547b96da60b23350bbe2b29de542d https://huntr.dev/bounties/35a0e12f-1d54-4fc0-8779-6a4949b7c434